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(57)Abstract: 

PROBLEM TO BE SOLVED: To secure the security of user 
authentication when a password processing function does not 
simultaneously exist in a server and a client by ciphering data flowing 
to a network. 

SOLUTION: When a server computer 1 does not has the processing 
function which is not contained in the list of a password processing 
method received from a client computer 2, NULL and a server initial 
key are transmitted to the client computer 2 (S304). The client 
computer 2 selects the holding password processing method, 
generates the password key from the received initial key and a 
certification identifier which a user inputs, ciphers user ID by using the 
key and transmits ID and a pertinent password processing program to 
the server computer 1 (S305). The server computer 1 sequentially 
generates the password key from the server initial key and the 

authentication identifier, recognizes the matching of ciphered user ID with received ciphering user ID by 
using the key and certifies it (S306). 
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